The UK Digital Securities Sandbox (DSS) is a joint Bank of England, FCA, and PRA programme established under the Financial Services and Markets Act 2023 (FSMA 2023) that allows firms to test the issuance, trading, and settlement of digital securities under a modified regulatory framework. As publicly reported, it is the principal UK route for tokenised wholesale-market activity and the closest European analogue to MAS Project Guardian or HKMA Project Ensemble. Notable participants include LSEG and the UK DIGIT (Digital Gilt Instrument) pilot, where HM Treasury selected HSBC Orion as the platform on 15 December 2025 with tokenised commercial-bank deposits as the cash leg for atomic delivery-versus-payment (DvP). For an operator picking a venue for tokenised wholesale issuance into Europe, DSS is the live route while the post-Brexit perimeter is still being legislated around it.
Scope and mechanics
The DSS perimeter covers issuance, trading, and settlement of digital securities, with the sandbox modifying rather than replacing the existing UK rulebook. In scope are tokenised debt securities (including sovereign and supranational), tokenised equity, money market instruments, and other transferable financial instruments where the on-chain entry is the operative record for transfer. Activities include primary issuance, operation of DLT-based trading platforms, post-trade settlement, and operation of central securities depositories adapted for distributed ledger infrastructure. The sandbox sits on FSMA 2023 powers giving HM Treasury authority to disapply or modify specified provisions of FSMA 2000, the Companies Act 2006 settlement-finality rules, and the CSDR equivalents brought into UK law post-Brexit, on a case-by-case basis.
Out of scope. Consumer protection rules continue unchanged for retail-facing offerings, including the FCA financial promotion regime in force from October 2023. AML/CTF obligations under the MLR regime apply in full. UK MAR applies with adaptations for the sandboxed venue but is not switched off. Tokenised deposits issued by authorised banks remain under PRA prudential treatment as conventional deposit liabilities and sit outside the DSS perimeter, although they can serve as the cash leg for DvP against DSS-issued securities. Pure crypto-asset activity that is not a transferable security runs through the financial promotion plus MLR registration route as before.
The modify-don't-replace approach matters operationally. Rather than building a parallel rulebook from scratch in the way MiCA did for crypto-assets, DSS lets an authorised participant operate under modified versions of existing rules tailored to its activity. The on-chain entry is given legal effect as the register of holdings, settlement-finality treatment is adjusted to the DLT context, and prudential and conduct rules are calibrated to the sandbox stage. The intent is that DSS-tested designs graduate into a permanent regime without re-architecting for a different rule set, although the production-licensing pathway is not yet defined.
Participants and notable workstreams
LSEG is one of the most public DSS participants, with sandbox admission tied to its tokenised market-infrastructure work including its private-markets digital issuance proposition. The cohort reportedly also includes incumbent post-trade infrastructure (CSDs, registrars), digital-asset-native technology platforms, and bank-led issuance rails, although the Bank of England and FCA have not published a complete public register. Treat secondary-press participant lists as provisional.
The largest known sovereign workstream is the UK DIGIT pilot. HM Treasury announced on 15 December 2025 that HSBC Orion had been selected as the platform mandate, making DIGIT the first G7 sovereign digital-bond programme of its scale (HSBC media release; The Block). The pilot's design pairs sovereign tokenised debt issuance on Orion with tokenised commercial-bank deposits as the cash leg, allowing atomic DvP between bond and cash legs without the conventional gilt-settlement window. The structural deep-dive on the Orion architecture and the cross-jurisdiction continuity with HKSAR sovereign issuance lives at HSBC Orion + UK DIGIT theme.
Regulatory mechanics
DSS is structured around a staged gating model. As publicly described, participants progress through a sequence of phases, each with progressively higher activity limits and broader scope, gated by supervisory review of operational resilience, risk management, and compliance with the modified rulebook. The phases are commonly described as five in number, running from initial admission through to a final stage at which the participant operates at scale under the modified rulebook ahead of any transition to a successor regime. Specific phase names and quantitative limits are set per participant rather than published as a uniform schedule, so operators should expect bilateral conditions rather than a one-size-fits-all gating ladder.
Information-sharing between the Bank of England, FCA, and PRA runs through standing arrangements set out in the FSMA 2023 framework, with each regulator keeping its statutory role within the sandbox. The FCA leads on conduct and market-integrity supervision, the Bank of England on settlement-finality and financial-stability oversight (including for participants taking on payment-system or CSD-equivalent functions), and the PRA on prudential supervision where the participant is PRA-authorised or where the activity carries balance-sheet implications. DSS engagement is multi-regulator from the outset and benefits from the kind of pre-engagement work captured in Pre-engaging your regulator.
DSS itself is time-limited. The sandbox, as legislated under FSMA 2023, runs for a defined window (publicly reported to be five years from commencement), after which the regime either feeds into a successor permanent regime or participants transition out.
Why it matters for tokenisation
DSS is the principal UK route for tokenised wholesale-market activity. For an operator choosing between an EU venue (under MiCA plus the DLT Pilot Regime), an APAC venue (MAS Project Guardian or HKMA Project Ensemble), and a UK venue, the UK proposition is modify-existing-rules with sandbox flexibility, rather than the wholesale new-perimeter approach the EU has taken. This fits the broader UK posture of legislating slowly and piloting widely.
A successful UK DIGIT pilot inside DSS would be a load-bearing precedent for tokenised sovereign issuance globally. Other G7 sovereigns have run tokenised-bond pilots at smaller scale (Germany's KfW, France's various programme experiments), but DIGIT is the first central-government issuance programme of its size to commit to a tokenised primary issuance and atomic DvP cash leg (The Block). The architectural choices (tokenised commercial-bank money rather than tokenised central-bank money for the cash leg, a single-bank issuance platform, atomic DvP coordinated at settlement) will set a reference point other jurisdictions read off.
DSS also matters for the Bank of England's synchronisation posture. Synchronisation, the RTGS exposing APIs for atomic DvP against external ledgers, is the BoE's stated alternative to a wholesale CBDC. DvP designs that work cleanly against tokenised commercial-bank deposits reduce pressure on the BoE to provide a tokenised central-bank money settlement leg; designs that hit settlement-quality limits would raise that pressure.
Open questions
- The post-DSS production-licensing pathway. Whether a successor permanent regime will be legislated, whether participants will graduate into existing regimes (CSDR-equivalent, MiFID II, banking) under modified guidance, or whether the window will be extended.
- Cross-border treatment for DSS-issued tokenised securities distributed into the EU, US, or APAC. EU distribution interacts with MiCA and the DLT Pilot Regime; US distribution runs into Reg S, Rule 144A, and the broader securities-laws perimeter; APAC distribution depends on jurisdiction-specific recognition.
- Whether the Bank of England will extend synchronisation into a tokenised central-bank money settlement leg, or whether tokenised commercial-bank deposits remain the only available cash leg.
- The complete public register of DSS participants, phase placements, and conditions, which the regulators have not published.
- Interaction with the Property (Digital Assets etc) Bill, which would classify digital assets as a third category of personal property under English law. Commencement timing and DSS guidance integration for tokenised collateral are unresolved.